Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.mft
File: unZwbT4IgT24sndmKK-EZRjibdI.mft (raw, json)
Hash identifier: CLBfXsfDFoQ70Qkkjouj/NJB9RV2q41OIUB3ClKMHNM=
Subject key identifier: A5:9F:24:CB:6B:B9:BA:62:BF:36:D5:CC:C9:99:AD:3C:3C:C2:19:00
Authority key identifier: BA:76:70:6D:3E:08:81:3D:B8:B2:77:66:28:AF:84:65:18:E2:6D:D2
Certificate issuer: /CN=ba76706d3e08813db8b2776628af846518e26dd2
Certificate serial: 019A4F62562C1907BD1D64192A15BA53D688
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/unZwbT4IgT24sndmKK-EZRjibdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 15:00:35 +0000
Manifest this update: Tue 04 Nov 2025 15:00:35 +0000
Manifest next update: Wed 05 Nov 2025 15:00:35 +0000
Files and hashes: 1: Do_ZNFPYd7X2-W1xZGRW00-SNss.roa (hash: Ol8hC9+K4SVNjxQKvkLbRCYT37tEnqOL0zEZ/PI9ysk=)
2: unZwbT4IgT24sndmKK-EZRjibdI.crl (hash: wd35P58BhVes3yNLur5rPpHTkzrvSbfxZ6L7H6S9UoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/unZwbT4IgT24sndmKK-EZRjibdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:56:2c:19:07:bd:1d:64:19:2a:15:ba:53:d6:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba76706d3e08813db8b2776628af846518e26dd2
Validity
Not Before: Nov 4 15:00:35 2025 GMT
Not After : Nov 5 15:00:35 2025 GMT
Subject: CN=a59f24cb6bb9ba62bf36d5ccc999ad3c3cc21900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e7:55:71:dc:ad:fd:c7:b6:f3:f8:7a:d0:b5:
f4:63:3d:11:bd:9d:6e:d5:46:89:8a:e2:1e:e9:22:
bb:60:3d:74:71:0d:e9:f2:5c:aa:a5:de:fa:45:4e:
07:61:f8:54:22:71:69:38:ed:7d:68:68:35:06:0d:
30:58:79:53:b7:dd:9b:72:59:53:3d:29:69:e7:51:
1d:b5:67:df:80:70:34:97:78:6f:d8:06:21:10:62:
08:f3:4f:df:4b:f3:48:43:80:05:eb:95:69:8e:c1:
1c:ab:7f:76:03:a1:8b:a8:16:52:0c:4e:24:80:42:
0b:a7:a1:0d:2b:28:0d:be:2c:dc:4f:ad:fc:ca:4d:
69:6f:82:47:50:bc:17:6d:c8:0c:d3:76:5f:d2:b2:
fc:bd:7b:48:c8:41:d7:5d:f8:ee:18:18:d2:0d:e6:
64:5a:d6:b5:ea:81:bf:c8:06:df:ef:d0:a2:22:64:
bc:37:d9:9e:f5:9a:ca:5b:df:0d:82:44:b6:74:ec:
05:cb:9c:04:ec:91:f2:b5:f5:a0:a1:d5:aa:b0:be:
df:f5:01:af:18:cd:26:24:e2:76:8d:15:eb:20:31:
b3:87:45:14:06:b1:0c:48:84:f3:b7:3b:be:27:55:
06:3c:48:ca:b1:83:8a:b9:91:12:9e:50:29:18:cc:
59:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:9F:24:CB:6B:B9:BA:62:BF:36:D5:CC:C9:99:AD:3C:3C:C2:19:00
X509v3 Authority Key Identifier:
keyid:BA:76:70:6D:3E:08:81:3D:B8:B2:77:66:28:AF:84:65:18:E2:6D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/unZwbT4IgT24sndmKK-EZRjibdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:8d:57:e9:a8:ac:6f:7e:f4:bc:66:1d:b7:11:74:a6:2b:b2:
58:3a:68:ce:41:fb:cd:6e:24:12:b8:03:cd:32:7d:61:72:a1:
53:95:6a:62:43:2f:41:5e:72:e6:a1:d8:a3:dc:e0:70:40:1d:
27:e7:58:0f:3b:dc:7d:18:ee:c5:4c:25:93:b0:b6:8c:51:2b:
d5:37:a4:7b:65:13:bd:f0:6a:ff:c6:1b:02:91:f3:61:32:8f:
69:03:71:7f:ae:de:9c:f5:3e:79:9e:62:55:a0:cd:d9:cf:82:
67:46:a5:96:82:20:6a:03:9a:2d:34:7d:bb:28:2c:bf:02:29:
f8:34:84:45:a8:40:2e:b9:54:81:9f:bc:c3:1d:94:8f:7b:a0:
c2:54:e6:d0:42:8b:a5:cc:6d:2b:59:79:19:df:ce:94:1f:37:
c3:0a:d4:c2:78:70:e4:9d:8d:9d:a5:98:a0:46:07:3c:ef:fb:
b6:ce:ae:fa:4c:47:91:b2:aa:11:91:23:ad:c8:5e:4d:dd:37:
d2:7a:5c:12:e8:a8:3d:a3:d6:ca:a9:11:a0:19:1b:aa:fb:7b:
5f:f2:50:f8:95:b2:6b:05:d4:88:05:4a:4a:92:89:6b:79:85:
b7:b5:46:e6:af:90:52:76:16:b6:d5:95:f0:63:9f:72:1f:10:
a2:eb:39:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:42:29 2025 by rpki-client